INTRODUCTION
1. UAB "Limarto LT" (hereinafter referred to as the "Company", "Limarto"), company code 303189032, registered office address.
2. We respect the rights of our Customers and other data subjects to their private information and process their personal data lawfully and fairly in order to justify their trust.
3. We only collect Customer Data that is necessary for the provision of the Company’s services, sale of products, business activities and/or visiting, using, browsing the Company’s websites, Facebook, LinkedIn, Instagram, TikTok pages, etc. ("Website"). We ensure that the Customer Data we collect and process will be secure and will only be used for a specific purpose.
5. By providing us with your personal data, you accept this Privacy Policy, understand its provisions and agree to comply with it.

II. CONCEPTS
1. Customer – any person, data subject, who orders, purchases, has used or has expressed a wish to use the Company's services, visits the Company's website, points of sale, or is in any other way connected with the services provided by the Group of Companies.
2. Personal Data means any information relating directly or indirectly to a Customer whose identity is known or can be identified, directly or indirectly, by reference to the data concerned. Processing of Personal Data means any operation performed on Personal Data (including collection, recording, storage, editing, modification, access, retrieval, transmission, archiving, etc.).
3. Services - any products, goods and/or services offered by the Company, whether electronic or non-electronic.

III. GROUNDS FOR PROCESSING PERSONAL DATA
1. The Company processes personal data on the basis of:
a. Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter referred to as the "GDPR" or "Regulation");
b. 30 June 2018. Law No XIII-1426 of the Republic of Lithuania on the Legal Protection of Personal Data (hereinafter referred to as "LPPD");
c. Law on Electronic Communications of the Republic of Lithuania No IX-2135;
The scope of personal data to be processed depends on the Company's services ordered, purchased or used and the information provided by the person as a visitor to the Company's website when ordering, purchasing and/or using the Company's services, visiting or registering at the Company's website.

• SOURCES OF PERSONAL DATA
Obtained directly from the data subject (you), e.g. by contacting the Company, registering and using the Company's services or purchasing goods, participating in lotteries or competitions, surveys or studies, leaving comments, asking questions, subscribing to the Company's newsletters and/or using the Company's services, contacting the Company to request a consultation or sending us your CV when applying for vacancies.
Received and generated when the data subject uses our services, e.g. when you use our network and services, make a phone call, send a short message service (SMS), surf the internet, visit our websites, etc.
Personal data is obtained on the basis of the Customer's consent. In cases where the Customer has expressed a wish to receive information or to express an opinion on specific products and/or services, personal data may be processed in order to ensure that the Customer is provided with the necessary information. The Customer has the right to withdraw the consent given to the Company at any time. The consent shall remain valid until it is fulfilled or, as the case may be, revoked, if sooner. The withdrawal of consent shall not affect the lawfulness of the processing based on the relevant consent given prior to the withdrawal.
Data that we obtain from other sources, e.g., where appropriate, from other bodies or companies, i.e., banks, publicly accessible registers, credit bureaus (e.g., Creditinfo UAB), insurance companies, etc.

•PROCESSING OF PERSONAL DATA
By providing the Company with personal data, the Client agrees to the Company's use of the collected data in the performance of its obligations to the Client and in the provision of the services expected by the Client. The Company needs the Client's personal data for the following purposes:
For the purpose of maintaining the relationship with the Customer and for the purpose of establishing and administering access to the Company's products and services.
For the purpose of concluding and executing contracts for the purchase and sale of goods and services with the Customer, for updating the Customer's data in order to ensure its accuracy, for the purpose of using external and internal registers, where necessary for the performance of a contract or for the purpose of taking action at the Customer's request prior to the conclusion of a contract or the fulfilment of a legal obligation.
For e-commerce purposes.
For the purpose of warranty services, processing orders, resolving problems with the sale, presentation or delivery of goods and other contractual obligations.
For the purpose of protecting the interests of the Customer and the Company. To protect the interests of the Customer and the Company, to carry out checks on the quality of the services provided by the Company, to provide evidence of business communications (recording of telephone conversations).
For the purpose of direct marketing, promotional campaigns (direct marketing games, promotions, lotteries, contests), discounts, providing offers, news, information, services, products or newsletters that the Customer requests from the Company or that the Company believes may be of interest to the Customer, collecting customer opinion surveys, market research and statistics, improving the quality of the Company's services, the experience of the Customer as a recipient of the services, and the development of new products and services.
For the purpose of ensuring the security of the Company's employees, the Client and property (video surveillance).
For the purpose of personnel selection (collection of personal data of candidates). The personal data of candidates who have sent their CVs directly to the Company by email to info@saltu.shop or via job portals (email address, name and surname, telephone number, all the information provided in the CV, cover letter and the position applied for) is processed by the Group of Companies for the purpose of selecting candidates for the position. Candidates' personal data is processed on the basis of consent. The Company shall keep the candidates' personal data for as long as the selection process for a specific job position is ongoing. For longer periods, the data will only be stored if the consent of the candidate is obtained. The Company does not collect or process candidates' special personal data.
Saltu manages the following internet and social networking sites in order to disseminate information about its activities and to offer services that meet its clients' needs and expectations:
http://saltu.lt
https://www.linkedin.com/company/limarto-lt/about/
https://www.instagram.com/saltu.lt/

https://www.facebook.com/saltu.lt
When you visit our social network accounts, your data may also be processed by the administrators of the social networks. We recommend that you also read the privacy policies provided by the social networks:
Linkedin Privacy Policy
Instagram privacy policy
Facebook privacy policy
For the purpose of maintaining relations with suppliers, the following personal data of suppliers and/or employees of suppliers are managed: name, surname, contact details (e-mail address, telephone, address), VAT number, business license or certificate of individual activity or certificate number, its validity date, personal identification number, activity under the business license or certificate of individual activity or certificate, bank account number, authorization.
The legal basis for the processing of these data is the performance of a contract to which the data subject is a party (Article 6(1)(b) GDPR).
For the purpose of debt management, the following personal data of debtors are processed: name, surname, job title, information about the debt, contact details.
The legal basis for the processing of these personal data is Article 6(1)(f) of the GDPR - legitimate interest of the controller.
Cookies collect information when you visit our website. A cookie is a small text file that a website places on your computer or mobile device browser when you visit the website. It allows the website to "remember" your actions and preferences (e.g. your registration name, language, font size and other display options) for a certain period of time, so that you don't have to re-enter them each time you visit the website or browse through its different pages.
The information collected by cookies allows us to provide you with a more user-friendly browsing experience and to learn more about the behaviour of website users, analyse trends and improve the website.
You can find out what cookies are used on this website and how to manage them in the cookie control panel on each page.
Other purposes for which the Company has the right to process the Customer's personal data where the Customer has expressed his/her consent, where the processing is necessary for the Company's legitimate interest, or where the Company is obliged to process the data by the relevant legal acts.

• PROVISION OF PERSONAL DATA TO RECIPIENTS
The Company undertakes to observe the duty of confidentiality with respect to the personal data of its Customers. Personal data may be disclosed to third parties only if this is necessary for the conclusion and performance of a contract for the benefit of the data subject or for other legitimate reasons.
The Company may provide personal data to its data processors who provide services to the Company and process personal data on behalf of the Company. Such data processors include: companies providing advertising, marketing services; companies providing web browsing or online activity analysis and services; companies developing, providing, supporting and developing software; companies providing information technology infrastructure services; companies providing communication services; providers of newsletter and SMS services; providers of postal and courier services; providers of archiving services; companies providing payment services; companies providing solicitors and legal services; providers of accounting and auditing services; and companies providing insurance services. Processors shall have the right to process personal data only on the instructions of the Company and only to the extent necessary for the proper performance of their obligations under the contract. The Company shall only use processors that provide sufficient guarantees that appropriate technical and organisational measures will be implemented in such a way that the processing complies with the requirements of the Regulation and that the data subject's rights are protected.
The Company may also provide Customer Data in response to requests from the courts or public authorities to the extent necessary to properly comply with applicable law and public authorities' orders.
The Company may need to exchange personal data where there is a specific intended purpose. The Company may need to provide personal data to the following recipients of personal data: Group companies, business partners, data processors (subcontractors).
If you agree to third party cookies, your personal data may be transferred outside of the EU/EEA, and the third party cookie handlers are responsible for such processing of personal data.

• STORAGE PERIOD FOR PERSONAL DATA
The personal data collected by the Company is stored in hard copy documents and/or in the Company's information systems in electronic format. Personal data shall not be processed for longer than is necessary to achieve the purposes of the processing or for longer than is required by the data subjects and/or provided for by law.
Although the customer may terminate the contract and refuse the Company's services, the Company shall continue to store the customer's personal data for possible future claims or legal claims until the expiry of the data retention periods.

• THE RIGHTS OF THE CLIENT AS A DATA SUBJECT
In accordance with the GDPR, you may exercise the following rights as a data subject:
The right of access to personal data. That is, to request information on whether your personal data is being processed and, if personal data is being processed, to have access to your personal data.
The right to rectification of personal data. This means that you can request the rectification of your personal data if you find that the personal data we process is incorrect, incomplete or inaccurate.
The right to erasure ("right to be forgotten"). This means that you can request the erasure of your personal data if you believe that your data is being processed unlawfully or fraudulently.
Right to restrict processing. This means that you can request to restrict (suspend) the processing of your personal data, except for storage, if, for example, you request the rectification of your personal data (pending the verification of the accuracy of your personal data and/or its correction), if it is established that your personal data are being processed unlawfully and you do not consent to the erasure of your data, if you have expressed your objection to the processing of your personal data etc.
The right to data portability. i.e. to request that your personal data processed by automated means be transferred to you and/or to another controller in a structured, commonly used and computer-readable format.
Right to object to processing. This means objecting to the processing of personal data where the processing is carried out on the basis of a legitimate interest or public interest.
The right to request that you are not subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.
The right to withdraw at any time the consents you have given to us for the processing of your personal data, e.g. for direct marketing.
The Customer may contact the Company to exercise his/her rights:
by submitting a written request in person, by post, through a representative or by electronic means - by e-mail: info@saltu.shop, in writing - to the address: Kolektyvo str. 15, LT-08314 Vilnius, Lithuania, UAB "Limarto LT.
The application must be signed. A copy of your identity document must be attached to your application. The request must be legible, signed and contain the name, surname, contact telephone number, e-mail address or other contact details of the data subject in the form requested, and information on which of the data subject's rights the data subject wishes to exercise and to what extent.
The Company shall process customer requests concerning the rights of the data subject free of charge. The processing of a request may be refused or subject to an appropriate fee if the request is manifestly unfounded or excessive, as well as in other cases provided for in the regulatory enactments.
We will respond to your request within 30 (thirty) calendar days of receipt of the request. In exceptional cases requiring additional time, we shall have the right to extend the time limit for processing the requested data or other requirements set out in your request by up to 90 (ninety) calendar days from the date of your request, upon notification to you.
To contact the State Data Protection Inspectorate if you are unable to resolve the matter with the Company, please visit http://vdai.lrv.lt for more information.

• CLIENT RESPONSIBILITY
To inform the Company of any changes to the information and data provided. It is important for the Company to have correct and valid Customer information;
Provide the necessary information to enable the Company to identify the Client at the Client's request and to verify that it is communicating or cooperating with the Client (either by providing proof of identity or by means of a legal procedure or electronic communication that would allow the Client to be properly identified). This is necessary to protect the Client's data and the data of other persons, so that the information disclosed about the Client is provided only to the Client, without prejudice to the rights of other persons.

• DATA SECURITY
In order to ensure a level of security appropriate to the risk involved in the processing of data, Limarto LT UAB has implemented appropriate technical and organisational measures. In selecting and implementing appropriate technical and organisational measures to ensure the security of data processing, the Company is guided by:
ENISA Guidelines, Good Information Security Practices, and the guidelines of the VDAI.

• FINAL PROVISIONS
These Privacy Policy Rules are an integral part of the Services provided by the Company. As part of the development and improvement of the Company's activities, the Company has the right to unilaterally modify these Privacy Policy Rules at any time. We recommend that Customers regularly consult the most recent version of the Privacy Policy Rules on this website in order to be aware of relevant information.

Information last updated 24.02.2025